Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft
File: caJzmyDCWcXRs4jRRT9vF5nyj2w.mft (raw, json)
Hash identifier: O35xPQ9NWCfNvfoc0LEHGF+umsuqc2OcISz/fbki2bY=
Subject key identifier: 78:32:9E:0C:2B:DD:75:0A:BE:86:AF:82:09:0E:C2:5A:1B:B4:6E:8A
Authority key identifier: 71:A2:73:9B:20:C2:59:C5:D1:B3:88:D1:45:3F:6F:17:99:F2:8F:6C
Certificate issuer: /CN=71a2739b20c259c5d1b388d1453f6f1799f28f6c
Certificate serial: 01987C097C78327DB56CC1D9CD9DE5C6AE70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/caJzmyDCWcXRs4jRRT9vF5nyj2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft
Manifest number: 0373
Signing time: Tue 05 Aug 2025 21:00:53 +0000
Manifest this update: Tue 05 Aug 2025 21:00:53 +0000
Manifest next update: Wed 06 Aug 2025 21:00:53 +0000
Files and hashes: 1: 5TxBRMul-Sk6vrxAy-O3Gig1UHg.roa (hash: eQW3KPMxFJcTn3nfO5KDUYdR77aYysAZcOPu9j2QK1w=)
2: NnS9tE0Wd3GJX8d4rDN6hefth0k.roa (hash: iMULd1rU9nLxXdG6/iod6VTsBhibbUWJ3DwkFA8v85s=)
3: R5EoUABcKiwLg06w_OxlkJfMqUk.roa (hash: irt2J6S0P6bVoeLD1I6fHpK1oay2SiSe0bMOlV1dUxk=)
4: caJzmyDCWcXRs4jRRT9vF5nyj2w.crl (hash: RIT9gPNYCPpOOLqaZ/erS8bT+DMjTGQaiT6AY3vgFo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/caJzmyDCWcXRs4jRRT9vF5nyj2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:09:7c:78:32:7d:b5:6c:c1:d9:cd:9d:e5:c6:ae:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71a2739b20c259c5d1b388d1453f6f1799f28f6c
Validity
Not Before: Aug 5 21:00:53 2025 GMT
Not After : Aug 6 21:00:53 2025 GMT
Subject: CN=78329e0c2bdd750abe86af82090ec25a1bb46e8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:bf:48:2b:d2:93:9f:c2:ef:46:41:59:6f:5a:
32:e7:11:56:d9:a8:f2:b3:5e:4b:5c:b4:45:1c:70:
1e:fc:e9:b2:c2:91:ae:c4:1f:5b:c6:ba:f9:0c:91:
47:e2:08:0b:4d:7d:6b:45:ae:a9:30:46:fa:4a:39:
76:8e:bf:69:01:0f:75:41:fa:30:76:bf:92:22:a4:
45:a2:0b:44:81:0f:ff:4c:e8:38:41:46:d4:99:96:
8a:49:5a:b4:77:82:75:f5:8e:85:40:1d:ab:45:de:
b9:91:8c:dd:4c:ce:a6:8c:10:3c:4f:f1:54:30:97:
41:48:a8:56:d8:d2:64:9e:a6:fc:d2:50:d7:56:b7:
e8:1c:2b:3b:aa:2d:7c:b7:0e:d8:32:ea:7a:ec:9e:
ec:2d:fc:69:39:62:d6:e9:74:25:9b:9f:0e:38:1d:
7b:a0:ba:93:ae:e7:bb:46:96:ee:2f:93:98:73:81:
68:2b:6e:4d:6a:c4:38:f0:b4:d9:f3:38:14:66:06:
18:40:ef:0c:ea:bf:44:96:4c:24:96:90:a4:f3:2d:
c7:d6:68:e6:f0:b2:57:c3:66:dd:f1:5f:57:c4:9d:
03:a4:c4:1b:6d:3b:f0:5f:5b:45:6a:20:f4:a3:7a:
8a:9e:f9:ea:01:c1:36:4d:f3:b4:f1:ba:a2:50:0d:
43:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:32:9E:0C:2B:DD:75:0A:BE:86:AF:82:09:0E:C2:5A:1B:B4:6E:8A
X509v3 Authority Key Identifier:
keyid:71:A2:73:9B:20:C2:59:C5:D1:B3:88:D1:45:3F:6F:17:99:F2:8F:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/caJzmyDCWcXRs4jRRT9vF5nyj2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:cb:b2:37:a5:8c:63:e3:a1:55:ed:1d:85:21:fc:d7:1e:5d:
87:c2:73:97:0b:7a:78:df:69:63:ed:86:b0:76:97:8e:38:b8:
95:e0:0d:7a:46:d6:92:c3:2b:73:64:43:c9:52:ed:75:7e:b7:
22:08:59:2b:e5:ab:ce:8f:49:16:fa:42:43:c7:e7:5a:40:d9:
35:89:3a:d0:bb:b7:b7:bd:32:d8:94:62:f8:2b:72:1a:97:83:
e9:14:09:85:23:44:e1:04:68:3c:2b:e0:49:97:e3:be:71:9a:
e7:84:7b:9a:c5:98:5a:b6:27:f3:11:f4:8c:ac:cf:d9:d7:b4:
2f:3d:94:9c:ee:4f:e2:d9:87:10:23:da:94:ec:49:48:6f:e2:
61:d1:7c:14:d4:e0:91:c7:0d:31:86:bc:32:bb:6f:fe:51:a8:
ac:fb:53:51:90:a6:b1:07:c8:3b:95:dd:e3:cb:00:b8:75:4d:
9c:90:3a:5f:a1:17:66:9f:0d:10:ab:4a:3e:d5:f4:c4:5b:9d:
51:1a:39:e9:f9:46:b2:2a:bd:33:52:8f:c9:6b:1b:98:fd:81:
0a:b2:bb:14:31:f1:55:c0:c9:75:54:6b:fa:dd:dc:60:a7:34:
4c:eb:4f:ce:6c:b5:5e:2f:eb:3f:1e:be:1f:d5:c9:18:fb:80:
bd:9f:c1:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:02:23 2025 by rpki-client